This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/CDEDB7B4718811F08D1AD867C4F9AE02.roa File: CDEDB7B4718811F08D1AD867C4F9AE02.roa (raw, json) Hash identifier: 649vg1JWhKFnpfYkQKA0lhowUrxdRlwrIS66GvGpFpw= Subject key identifier: 71:82:F4:F5:3E:9D:B7:BB:2C:3B:58:51:75:54:AC:A4:45:FC:98:1E Certificate issuer: /CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7 Certificate serial: 3761 Authority key identifier: F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/CDEDB7B4718811F08D1AD867C4F9AE02.roa Signing time: Fri 16 Jan 2026 16:12:56 +0000 ROA not before: Fri 16 Jan 2026 16:12:56 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 131711 IP address blocks: 2402:1d20::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 15:26:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14177 (0x3761) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186214, serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7 Validity Not Before: Jan 16 16:12:56 2026 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=696a6388-0aab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:86:5d:36:50:b4:b4:e4:76:36:eb:ef:f7:32: d1:20:5a:05:5d:5f:b1:16:21:18:ee:ae:b6:51:73: 81:6d:db:9d:70:5e:2e:86:8c:da:50:1c:e7:73:26: 5a:0c:dd:68:da:23:17:38:4d:28:80:5b:a0:ec:f9: 42:92:45:bf:2f:4c:db:5d:5b:0b:23:d2:42:c1:46: e8:22:4a:64:59:6e:0a:c2:1b:89:4e:ba:06:8f:54: 2e:7d:c7:e8:1b:31:13:c9:07:15:33:80:ac:50:c1: 25:3b:b3:86:2e:6d:7d:f0:15:da:b0:72:fa:85:8c: 95:11:57:7b:90:f9:2c:0d:92:37:33:7f:fb:4a:7c: 9c:67:57:ba:79:2f:85:d4:6e:34:25:1a:d9:2a:38: ff:06:fd:0a:db:a1:00:51:ed:4e:5a:40:59:40:0e: 3e:05:e1:f7:f1:89:31:ee:01:63:4a:0f:06:6f:68: a1:06:d0:0d:65:58:8c:46:30:ce:65:f0:2e:6a:a0: ec:95:72:52:6d:68:44:7f:a5:c7:8b:75:8b:6f:31: 9e:0d:a5:2f:4e:72:93:e2:14:91:b3:7f:49:95:5a: 3d:05:1b:df:21:d0:24:86:75:80:85:8a:e3:ae:4a: 37:17:1b:ea:95:04:c5:ca:b5:10:97:e8:95:40:56: 96:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:82:F4:F5:3E:9D:B7:BB:2C:3B:58:51:75:54:AC:A4:45:FC:98:1E X509v3 Authority Key Identifier: keyid:F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/CDEDB7B4718811F08D1AD867C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2402:1d20::/32 Signature Algorithm: sha256WithRSAEncryption 79:b2:dd:aa:2d:4e:9f:12:69:72:d8:a7:56:64:9b:97:bb:6e: 5a:e8:85:9d:32:5d:d4:2b:65:d2:ab:0a:0a:05:43:bb:1f:34: 91:64:70:f6:09:c4:ef:c1:b7:3d:49:b8:e9:8c:9f:b3:bf:44: 14:b1:06:43:fa:2c:27:1a:9e:26:47:48:d0:1e:b7:8e:bb:06: cc:f0:0b:e5:46:57:9a:d0:dd:1c:7d:13:d2:90:19:8d:8d:0e: 71:fd:32:e4:93:2a:6c:61:d2:a3:71:fb:47:68:f0:91:cc:ed: 8a:3e:2a:5a:a5:bc:3a:7e:f7:34:ac:ef:43:87:4c:5e:2e:76: 3f:0a:e4:6b:4b:e5:66:a7:6c:60:db:ab:38:ca:e6:b6:31:f1: 98:b6:ff:53:7f:1f:ec:d8:41:f6:54:63:6f:e8:f3:7c:7e:05: d9:06:7c:76:7a:0e:f1:10:e6:18:56:33:e5:3a:22:df:66:45: dd:e8:88:c3:9b:f3:ba:7e:20:36:27:c1:fb:4b:48:bc:7e:c2: e6:96:70:b5:95:ac:3b:97:59:27:8c:4d:75:d3:d6:77:d2:18: 2a:26:b7:75:63:80:4f:fa:d0:0d:4f:71:c0:af:e1:9f:a2:a4: 1b:f6:44:cc:59:6a:72:b5:09:dc:4c:53:a4:4d:a8:90:49:fc: f5:9f:e4:68 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgICN2EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx ODYyMTQxMTAvBgNVBAUTKEYzREI5RjE2MjAwOEJENjY2Q0JGOEM5OTYwNzgxNENG QUIyNEQ3RTcwHhcNMjYwMTE2MTYxMjU2WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDDA02OTZhNjM4OC0wYWFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr4ZdNlC0tOR2Nuvv9zLRIFoFXV+xFiEY7q62UXOBbdudcF4uhozaUBzncyZa DN1o2iMXOE0ogFug7PlCkkW/L0zbXVsLI9JCwUboIkpkWW4KwhuJTroGj1Qufcfo GzETyQcVM4CsUMElO7OGLm198BXasHL6hYyVEVd7kPksDZI3M3/7SnycZ1e6eS+F 1G40JRrZKjj/Bv0K26EAUe1OWkBZQA4+BeH38Ykx7gFjSg8Gb2ihBtANZViMRjDO ZfAuaqDslXJSbWhEf6XHi3WLbzGeDaUvTnKT4hSRs39JlVo9BRvfIdAkhnWAhYrj rko3FxvqlQTFyrUQl+iVQFaWsQIDAQABo4ICljCCApIwHQYDVR0OBBYEFHGC9PU+ nbe7LDtYUXVUrKRF/JgeMB8GA1UdIwQYMBaAFPPbnxYgCL1mbL+MmWB4FM+rJNfn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjIxNC9DNjVENTM2NDMz MUExMUU0QUYyQUIzN0NDNEY5QUUwMi84OXVmRmlBSXZXWnN2NHlaWUhnVXo2c2sx LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzg5dWZGaUFJdldac3Y0eVpZSGdVejZzazEtYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODYyMTQvQzY1RDUzNjQzMzFBMTFFNEFGMkFCMzdDQzRGOUFFMDIvQ0RFREI3QjQ3 MTg4MTFGMDhEMUFEODY3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8E ETAPMA0EAgACMAcDBQAkAh0gMA0GCSqGSIb3DQEBCwUAA4IBAQB5st2qLU6fEmly 2KdWZJuXu25a6IWdMl3UK2XSqwoKBUO7HzSRZHD2CcTvwbc9SbjpjJ+zv0QUsQZD +iwnGp4mR0jQHreOuwbM8AvlRlea0N0cfRPSkBmNjQ5x/TLkkypsYdKjcftHaPCR zO2KPipapbw6fvc0rO9Dh0xeLnY/CuRrS+Vmp2xg26s4yua2MfGYtv9Tfx/s2EH2 VGNv6PN8fgXZBnx2eg7xEOYYVjPlOiLfZkXd6IjDm/O6fiA2J8H7S0i8fsLmlnC1 law7l1knjE1109Z30hgqJrd1Y4BP+tANT3HAr+GfoqQb9kTMWWpytQncTFOkTaiQ Sfz1n+Ro -----END CERTIFICATE-----Generated at Sun Jan 25 07:55:51 2026 by rpki-client